$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa File: d85e26cd-0a08-3417-8770-e4857474bcf4.roa (raw, json) Hash identifier: 2PDtnRzdPyAQJEVqQJZ88VORRRGfiuMXnx1EX4ssqGA= Subject key identifier: DA:3B:D1:E0:29:D8:82:AE:49:A4:D9:2C:77:A1:6C:8C:D2:91:D7:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A19874B63503209C64E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.165.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:19:87:4b:63:50:32:09:c6:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2e27d2c0-e54f-4c57-86c7-bf9c8b96a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:ac:ed:c6:cd:7e:ec:c6:ef:e1:ed:50:51: d7:e5:03:52:3d:c4:75:71:71:78:2b:cd:f7:b0:34: 1a:16:96:32:9a:60:23:34:b5:52:84:77:3e:99:c5: 8a:3f:ce:41:34:a7:35:f7:6b:4e:92:ef:7f:6f:a3: 2c:c2:88:97:b9:b6:cb:65:6d:c6:e6:44:4a:f1:76: 61:4b:ee:bb:87:a0:7b:21:11:e3:8e:fd:de:31:9f: 69:2a:1d:22:e3:e5:ca:84:54:21:84:21:82:22:b2: 71:f9:51:26:30:96:b4:a2:e0:4d:7a:2f:79:fc:58: 4a:80:f8:3c:30:48:0b:fb:df:63:c0:57:07:38:7d: 65:43:6f:46:9a:be:14:e5:91:39:1f:ba:84:24:ff: 71:71:99:b7:11:43:8e:36:ab:01:6c:19:f8:0b:6d: 97:b6:ac:bc:b2:11:df:f5:e6:64:2f:96:e9:73:41: 1d:1f:a7:de:6d:f7:34:2c:ed:17:92:98:3b:f7:c7: a1:fc:66:2f:fb:9d:84:88:d2:08:fb:70:03:5b:3b: 7a:77:48:fe:59:c7:a8:ec:e8:b3:93:6c:aa:da:ca: b8:45:6d:a5:f8:a0:ee:b7:85:ad:4b:c7:2c:35:6d: ec:0a:1f:80:e6:f1:7f:e0:eb:5a:d0:cc:29:28:7b: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3B:D1:E0:29:D8:82:AE:49:A4:D9:2C:77:A1:6C:8C:D2:91:D7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6f:b3:6e:d5:38:bc:6f:f5:62:e1:f1:02:93:12:e2:51:3e: 56:ec:88:a9:bd:14:e3:c8:79:a4:bc:b1:73:56:e2:59:f0:7a: ac:8a:f3:e2:0c:06:23:ed:c0:bd:9a:c9:02:a6:59:5c:7b:90: c6:77:54:71:f9:0a:00:33:fa:27:d4:58:54:34:7a:db:94:e8: de:3b:0a:b9:06:8e:59:39:d6:f9:8f:00:31:2f:2e:ae:e6:da: 82:1e:87:06:bb:84:c0:63:63:94:25:40:89:8b:97:8f:9a:7b: 7a:77:b5:35:ed:bb:be:fb:86:a2:66:0c:08:3a:0a:70:60:bb: 47:63:bd:14:9e:31:9c:34:03:23:81:68:40:8e:2a:6a:a0:3a: 04:93:93:5f:e5:ee:ec:be:29:e4:c4:6c:f9:82:be:aa:f9:3a: 98:c0:4d:a3:9f:af:8f:a7:71:fe:7f:62:40:05:03:55:12:c3: 3f:0a:da:63:52:0f:b4:a7:7c:3d:8a:aa:09:06:81:59:11:0c: 1e:e1:b5:b5:f0:4d:c7:dd:71:f0:5f:05:d9:bb:4a:bc:b5:25: 3e:88:51:8b:64:8f:3a:91:65:52:8f:cc:ea:d7:0b:1a:ca:b2: 8b:2a:42:90:6f:ca:21:39:2e:90:df:ab:fd:04:2f:a7:ad:06: 80:08:cc:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShmHS2NQMgnGToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmUyN2QyYzAtZTU0Zi00YzU3LTg2YzctYmY5YzhiOTZhMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Gs7cbNfuzG7+HtUFHX5QNSPcR1cXF4K833 sDQaFpYymmAjNLVShHc+mcWKP85BNKc192tOku9/b6MswoiXubbLZW3G5kRK8XZh S+67h6B7IRHjjv3eMZ9pKh0i4+XKhFQhhCGCIrJx+VEmMJa0ouBNei95/FhKgPg8 MEgL+99jwFcHOH1lQ29Gmr4U5ZE5H7qEJP9xcZm3EUOONqsBbBn4C22Xtqy8shHf 9eZkL5bpc0EdH6febfc0LO0Xkpg798eh/GYv+52EiNII+3ADWzt6d0j+Wceo7Oiz k2yq2sq4RW2l+KDut4WtS8csNW3sCh+A5vF/4Ota0MwpKHvZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo70eAp2IKuSaTZLHehbIzSkdcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1ZTI2Y2QtMGEwOC0z NDE3LTg3NzAtZTQ4NTc0NzRiY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtvs27VOLxv9WLh8QKTEuJRPlbsiKm9FOPIeaS8sXNW4lnweqyK8+IM BiPtwL2ayQKmWVx7kMZ3VHH5CgAz+ifUWFQ0etuU6N47CrkGjlk51vmPADEvLq7m 2oIehwa7hMBjY5QlQImLl4+ae3p3tTXtu777hqJmDAg6CnBgu0djvRSeMZw0AyOB aECOKmqgOgSTk1/l7uy+KeTEbPmCvqr5OpjATaOfr4+ncf5/YkAFA1USwz8K2mNS D7SnfD2KqgkGgVkRDB7htbXwTcfdcfBfBdm7Sry1JT6IUYtkjzqRZVKPzOrXCxrK sosqQpBvyiE5LpDfq/0EL6etBoAIzDM= -----END CERTIFICATE-----Generated at Fri May 9 23:10:02 2025 by rpki-client